CVE-2010-4221
ProFTPD - Stack-Based Buffer Overflow via TELNET IAC Escape Character
Title source: llmExploitation Summary
EIP tracks 7 public exploits for CVE-2010-4221.
PoCs published by Metasploit, kingcope, M41doror, including Metasploit module exploits/linux/ftp/proftp_telnet_iac.
AI-analyzed exploit summary This is a Metasploit module exploiting a stack-based buffer overflow in ProFTPD (CVE-2010-4221) via Telnet IAC commands, achieving remote code execution on Linux systems. It includes ROP chains for specific distributions like Debian Squeeze and Ubuntu 10.04.
Description
Multiple stack-based buffer overflows in the pr_netio_telnet_gets function in netio.c in ProFTPD before 1.3.3c allow remote attackers to execute arbitrary code via vectors involving a TELNET IAC escape character to a (1) FTP or (2) FTPS server.
Exploits (7)
This is a Metasploit module exploiting a stack-based buffer overflow in ProFTPD (CVE-2010-4221) via Telnet IAC commands, achieving remote code execution on Linux systems. It includes ROP chains for specific distributions like Debian Squeeze and Ubuntu 10.04.
This Metasploit module exploits a stack-based buffer overflow in ProFTPD (CVE-2010-4221) by sending a large number of Telnet IAC commands to corrupt memory and execute arbitrary code. It includes automatic targeting via banner fingerprinting and brute-forcing for specific FreeBSD versions.
This exploit targets a buffer overflow vulnerability in ProFTPD (CVE-2010-4221) to achieve remote code execution. It includes shellcode for both FreeBSD and Linux systems, leveraging stack smashing or return-into-libc techniques depending on the target platform.
This repository contains a functional exploit for CVE-2010-4221, targeting ProFTPD's Telnet IAC vulnerability. The exploit uses Return-Oriented Programming (ROP) to bypass ASLR and includes multiple attack types (socket reuse, reverse shell, bind shell, and custom shellcode).
This repository contains a detailed technical writeup of the exploitation process for CVE-2010-4221, a backdoor in ProFTPD 1.3.3c. It includes enumeration steps, exploitation using Metasploit, and post-exploitation actions.
This Metasploit module exploits a stack-based buffer overflow in ProFTPD (CVE-2010-4221) by sending excessive Telnet IAC commands to achieve remote code execution. It includes ROP chains for specific Linux distributions (Debian, Ubuntu) to bypass stack protections.
This Metasploit module exploits a stack-based buffer overflow in ProFTPD versions 1.3.2rc3 to 1.3.3b by sending a large number of Telnet IAC commands to corrupt memory and execute arbitrary code. It includes automatic targeting via banner fingerprinting and brute-forcing for specific FreeBSD environments.